Gavin Zhong (VulDB User)

wong2 mcp-cli oAuth provider.js redirectToAuthorization os command injection

Redash getattr python.py run_query sandbox

comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes

comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting

aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation

gradio-app gradio CORS is_valid_origin privilege escalation

fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking

docarray Web API torch_dataset.py __getitem__ prototype pollution

Zylon PrivateGPT settings.yaml cross-domain policy

nortikin Sverchok Set Property Mk2 Node getsetprop_mk2.py SvSetPropNodeMK2 prototype pollution